Sophos SG 330 Operating Instructions Manual

Brand: Sophos

Model: SG 330

Type: Operating Instructions Manual

This manual is also suitable for

Operating Instructions

SG 310/330 Rev. 2

1SG 310/330 Rev. 2

Operating Instructions

Foreword

We are pleased to welcome you as a new customer of our Sophos SG appliances.

To install and conﬁgure the hardware appliance you can use the following

documents:

Ì Hardware Quick Start Guide: Connection to the

system peripherals in a few steps

Ì Operating Instructions: Notes on the security and

commissioning of the hardware appliance

Ì Administration Guide: Installing and conﬁguring the software appliance

The Hardware Quick Start Guide and the Safety Instructions are also delivered

in printed form together with the hardware appliance. The instructions must be

read carefully prior to using the hardware and should be kept in a safe place.

You may download all user manuals and additional documentation from the

support webpage at: sophos.com/support

Security Symbols

The following symbol and its meaning appears in the Hardware Quick Start

Guide, Safety Instructions and in these Operating Instructions.

Caution and Important Note. If these notes are not correctly observed:

Ì This is dangerous to life and the environment

Ì The appliance may be damaged

Ì The functions of the appliance will be no longer guaranteed

Ì Sophos shall not be liable for damages arising from a

failure to comply with the Safety Instructions

Designed Use

The hardware appliances are developed for use in networks. The SG 310/330

models may be operated as a standalone appliance. The hardware appliance can

be used in commercial, industrial and residential environments.

The SG 310/330 models belongs to the appliance group A.

The hardware appliance must be installed pursuant to the current installation

notes. Otherwise failure-free and safe operation cannot be guaranteed. The EU

declaration of conformity is available at the following address:

Sophos Technology GmbH

Amalienbadstr. 41/Bau 52

76227 Karlsruhe

Germany

2SG 310/330 Rev. 2

Operating Instructions

CE Labeling, FCC and Approvals

The SG 310/330 appliances comply with FCC Class A, CE, C-Tick, VCCI and UL.

Important Note: For computer systems to remain CE and FCC compliant, only CE

and FCC compliant parts may be used. Maintaining CE and FCC compliance also

requires proper cable and cabling techniques.

Operating Elements and Connections

SG 310/330 Rev. 2

1 x COM

(RJ45)

2 x

USB 3.0

2 x 10 GbE

SFP+ – ﬁxed

8 x GbE copper – ﬁxed.

Incl. 2 bypass pairs

(ports E0/1 and E2/3)

1 x expansion bay

(shown here with optional

FleXi Port module)

Micro USBNavigation

for LCD

Multi-function

LCD display

2 x GbE SFP –

ﬁxed

SG 310/330

1 x

USB 3.0

Power supply

Power switch1 x

HDMI

Connector for optional

PoE Power Module

Connector for optional 2nd

external power supply

* The displayed front image is of SG 330 device. The SG 310 device may vary slightly.

3SG 310/330 Rev. 2

Operating Instructions

LED Status

Power (LED Display)

Power Supply Acitve Green

Power Supply Failure Red

SSD Active Blue

LEDs on each RJ45 Ethernet connector

ACT/LNK

(Left LED)

Green Constantly 1. The Ethernet port is receiving power.

2. Good connection between the Ethernet port and hub.

Flashing The adapter is sending or receiving network data. The

frequency of the ﬂashes varies with the amount of trafﬁc.

Off 1. The adapter and switch are not receiving power.

2. No connection between both ends of network.

3. Network drivers have not been loaded

or do not function correctly.

Speed

(Right LED)

Amber On The Ethernet port is operating at 1,000 Mbps.

Green On The Ethernet port is operating at 100 Mbps.

Off The Ethernet port is operating at 10 Mbps.

LEDs on each SFP connector

ACT/LNK Green Constantly 1. The SFP connector is receiving power.

2. Good linkage between the SFP connector and hub.

Flashing The adapter is sending or receiving network data. The

frequency of the ﬂashes varies with the amount of trafﬁc.

Off 1. The adapter and switch are not receiving power.

2. No connection between both ends of network.

3. Network drivers have not been loaded

or do not function correctly.

LEDs on each SFP+ connector

ACT/LINK

(Left LED)

Green Constantly 1. The SFP+ connector is receiving power.

2. Good linkage between the SFP+ connector and hub.

Flashing The adapter is sending or receiving network data. The

frequency of the ﬂashes varies with the amount of trafﬁc.

Off 1. The adapter and switch are not receiving power.

2. No connection between both ends of network.

3. Network drivers have not been loaded

or do not function correctly.

ACT/LINK

(Right LED)

Blue On The SFP+ connector is operating at 10,000 Mbps.

Amber On The SFP+ connector is operating at 1,000 Mbps.

Off Either the LED is not working or the SFP+ connector

is operating at a speed below 1,000 Mbps.

LAN Bypass (LED Display)

LAN Bypass Active Green

LAN Bypass Off Off

Back side

Power Supply Green Constantly Power

Off No power

4SG 310/330 Rev. 2

Operating Instructions

Trafﬁc on interface

Executable Actions

Ì Change IP Address: This option enables the user to change the interface’s IP

address and netmask. All available and enabled IP addresses can be changed.

Ì Reboot machine: The security appliance is rebooted. The reboot

action will shut down the system completely and reboot.

Ì Shut down: The security appliance is shut down. The shut down action allows

you to turn off the system, and allows you to cleanly stop all running services.

Ì Factory reset: All settings are reset to the factory settings. The factory

reset function sets all of the conﬁguration settings and options to their

original state. All data entered after the initial installation will be deleted,

including the HTTP proxy cache, the entire email queue, accounting

and reporting data, passwords, and uninstalled Up2Date packages.

The version of the software will not change. That is, all ﬁrmware

and pattern updates that have been installed will be retained.

Ì Disable OTP (One Time Password) authentication: The OTP

authentication will be disabled for the selected options. This feature

only handles webadmin and shell access options if they are enabled.

Sophos UTM version and Appliance Uptime

CPU load information and Average Load in the last 1, 5 and 15 minutes

Memory usage

LCD and Control Keys

The Sophos SG 310/330 units have an LCD and an operating unit with four

membrane keys. In the LCD, 16 characters per line can be displayed. The display

contains in four cycling views information on the hardware and speciﬁc system

states.

After the security appliance has booted this message is displayed.

SOPHOS

Protection

UTM 9.xxx

10 days 01:43:17

CPU xx%

xx% yy% zz%

RAM x% y GB

SWAP x% y GB

all in x kbits/sec

out y kbits/sec

5SG 310/330 Rev. 2

Operating Instructions

Control Key Functions

The current menu is left. When the key is pressed a couple of times, the

modiﬁcations are discarded and the initial state will be displayed.

These keys are used to switch between the different menus and/or characters.

Pressing executes the conﬁgured action.

Change IP Address

S.NO. Action Item/press What you see on the LCD What it means

Conﬁg menu

1. Change IP addr

Interface eth0

192.168.0.1/24

Selects interface

IP address (Eth0)

192.168.0.1

Edit IP address

Changes digit at cursor position

IP address (Eth0)

192.168.0.1

Moves cursor to the

next right position

Exits edit mode without saving

eth0 Netmask

Displays netmask value after

the last IP address digit

Change netmask value

9. Saves changed IP address

and netmask

Reboot Machine

S.NO. Action Item/press What you see on the LCD What it means

Conﬁg menu

1. Change IP addr

Conﬁg menu

2. Reboot Machine

Shutting down

Are you sure? n

Toggles between “y“ and “n“

Selects choice

6SG 310/330 Rev. 2

Operating Instructions

Shut Down

S.NO. Action Item/press What you see on the LCD What it means

Conﬁg menu

1. Change IP addr

Conﬁg menu

3. Shutdown

Rebooting

Are you sure? n

Toggles between “y“ and “n“

Selects choice

Shut Down

S.NO. Action Item/press What you see on the LCD What it means

Conﬁg menu

1. Change IP addr

Conﬁg menu

4. Factory Reset

All Data erased!

Are you sure? n

Toggles between “y“ and “n“

Selects choice

Disabling OTP (One Time Password) Authentication

S.NO. Action Item/press What you see on the LCD What it means

Conﬁg menu

1. Change IP addr

Conﬁg menu

5. OTP Recovery

Disable OTP

Not available

Displayed if no option to

disable is available

Disable OTP

xxxxxx

4. Selects feature to

disable (if enabled)

Disable xxxxxx

Are you sure? n

Toggles between “y“ and “n“

Selects choice

7SG 310/330 Rev. 2

Operating Instructions

Putting into Operation

Caution: Risk of explosion if battery is replaced by an incorrect type. Dispose of

used batteries according to the instructions.

Scope of Supply

The supplied parts are indicated in the Hardware Quick Start Guide.

Mounting Instructions

The SG 310/330 appliances are designed for use in racks. Please consider the

following security tips:

Important Note: Functional reliability outside of a rack cannot be guaranteed.

Warnings and Precautions

The appliance can be operated safely if you observe the following notes and the

notes on the appliance itself.

Rack Precautions

Ì Ensure that the leveling jacks on the bottom of the rack are fully

extended to the ﬂoor with the full weight of the rack resting on them.

Ì In single rack installation, stabilizers should be attached to the rack.

Ì In multiple rack installations, the racks should be coupled together.

Ì Always make sure the rack is stable before

extending a component from the rack.

Ì You should extend only one component at a time—extending two or

more simultaneously may cause the rack to become unstable.

General Server Precautions

Ì Review the electrical and general safety precautions that came

with the components you are adding to your appliance.

Ì Determine the placement of each component in

the rack before you install the rails.

Ì Install the heaviest server components on the

bottom of the rack ﬁrst, and then work up.

Ì Allow the hot plug hard drives and power supply

modules to cool before touching them.

Ì Always keep the rack‘s front door, all panels and server components

closed when not servicing to maintain proper cooling.

8SG 310/330 Rev. 2

Operating Instructions

Rack Mounting Considerations

Ì Ambient operating temperature: If installed in a closed or multi-unit rack

assembly, the ambient operating temperature of the rack environment

may be greater than the ambient temperature of the room. Therefore,

you should install the equipment in an environment compatible

with the manufacturer’s maximum rated ambient temperature.

Ì Reduced airﬂow: Equipment should be mounted into

a rack with sufﬁcient airﬂow to allow cooling.

Ì Mechanical loading: Equipment should be mounted into a rack so that a

hazardous condition does not arise due to uneven mechanical loading.

Ì Circuit overloading: Consideration should be given to the connection

of the equipment to the power supply circuitry and the effect that any

possible overloading of circuits might have on overcurrent protection

and power supply wiring. Appropriate consideration of equipment

nameplate ratings should be used when addressing this concern.

Ì Reliable ground: Reliable grounding must be maintained at all times.

To ensure this, the rack itself should be grounded. Particular attention

should be given to power supply connections other than the direct

connections to the branch circuit (i.e., the use of power strips, etc.).

Rack Mounting Instructions

To mount the appliance to the rack you need the delivered rack-mount brackets.

There are a variety of rack units on the market, which may mean the assembly

procedure will differ slightly. You should also refer to the installation instructions

that came with the rack unit you are using.

Important Note: Make sure you use the screws supplied with the rack-mount

brackets. Using the wrong screws could damage the hardware appliance and

would invalidate your warranty. Please observe the mounting instructions for

your rack.

1. Attach the rack-mount brackets to the appliance.

Place the appliance on a hard, ﬂat surface with the front panel facing you.

Attach the rack–mount brackets to the left and right side of the appliance

with the supplied screws.

Make sure the brackets are properly attached to the appliance.

2. Choose the rack location.

Leave enough clearance in front of the rack so that you can open the front

door completely (~60 cm/25 inches).

Leave approximately 80 cm/30 inches of clearance in the back of the rack

to allow for sufﬁcient airﬂow and ease in servicing.

This product is for installation only in a restricted access location (dedicated

equipment rooms, service closets and the like).

3. Slide the appliance into the rack.

4. Attach the brackets to the rack with the appropriate screws (not included).

9SG 310/330 Rev. 2

Operating Instructions

Connection and Conﬁguration

How to connect the appliance is described in the Hardware Quick Start Guide. For

conﬁguration you can follow the initial setup wizard described in the WebAdmin

Quick Start Guide or cancel it and perform a manual setup (see the Sophos UTM

Administration Guide).

SFP GBIC Ports

The SG 310/330 models provide the option to add Sophos FleXi Port network

modules with SFP (1 GbE) or SFP+ (1/10GbE) GBIC Ports. The abbreviation SFP

GBIC stands for small form-factore plugable GigaBit interface converter, a ﬂexible

interface which changes electronic signals into optical signals. The converters

used with the appliance are often also called Mini-GBIC or New GBIC.

To use SFP GBIC ports, you will need the appropriate SFP GBIC modules. These

modules are not delivered with the appliance but available through your Sophos

partner. There are different module types. The required type is determined by the

existing network. The following SFP GBIC module types may be used:

SFP:

1000 Base-T

IEEE 802.3 - 1 Gbit/s via Ethernet cable. An Ethernet cable category 5 covers a

maximum distance about 100 meters.

1000 Base-SX

IEEE 802.3 - 1 Gbit/s via ﬁberglass. Multi-mode ﬁberglass cables (MMF) cover a

distance of 200 m to 550 m.

1000 Base-LX

IEEE 802.3 - 1 Gbit/s via ﬁberglass. Here, exclusively singlemode-ﬁber glass is

used. This transmission option covers approximately 10 km.

SFP+:

10GBase-SR

IEEE 802.3 - 10 Gbit/s via ﬁberglass. Multi-mode ﬁberglas cables cover a

distance of up to 400 m.

10GBase-LR

IEEE 802.3 - 10 Gbit/s via ﬁberglass. Single-mode ﬁberglas cover a distance of

approximately 10 km

Note: The SFP+ ports of the Sophos FleXi Port modules are dual-rate capable

supporting both 1GbE and 10GbE speeds when using appropriate GBICs also

supporting both rates.

Caution: The SFP GBIC and SFP+ ports use lasers to transmit signals over

ﬁber optic cable. The lasers are compliant with the requirements of a Class 1

Laser equipment and are inherently eye-safe in normal operation. However, you

should never look directly at a transmit port when it is powered on. Always install

appropriate and UL approved Laser Class I Transceivers, rated 3.3Vdc, max. 1W,

in the ﬁber ports before using the ﬁber ports.

10SG 310/330 Rev. 2

Operating Instructions

Installing a SFP GBIC module:

Please read the operation manual to the SFP GBIC module. Carefully insert the

SFP GBIC module into the port until it engages. The interface is immediately

ready for use.

Removing a SFP GBIC module:

1. Remove the ﬁberglass cable from the module which you wish to remove.

2. Remove the module carefully from the port.

Depending on when you purchased your SFP GBIC module, it may have any of

three different release mechanisms: a plastic tab on the bottom of the mini-

GBIC, a wire bail, or a plastic collar around the mini-GBIC.

Please read the operation manual to the SFP GBIC module.

Serial Console

You can connect a serial console to the COM port of the Sophos SG Firewall

hardware appliances. You can use, for instance, the Hyperterminal terminal

program which is included with most versions of Microsoft Windows to log on to

the appliance console. Use an RJ45 to DB9 adapter cable or the provided USB

cable to connect the console to your hardware appliance.

The required connection settings are:

Ì Bits per second: 38,400

Ì Data bits: 8

Ì Parity: N (none)

Ì Stop bits: 1

Access via the serial console is activated by default on ttyS1. The connections of

the appliances and the respective functionality are listed in chapter “Operating

Elements and Connections.”

Operating Instructions

United Kingdom and Worldwide Sales

Tel: +44 (0)8447 671131

Email: [email protected]

North American Sales

Toll Free: 1-866-866-2802

Email: [email protected]

Australia and New Zealand Sales

Tel: +61 2 9409 9100

Email: [email protected]

Asia Sales

Tel: +65 62244168

Email: [email protected]

Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK

Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are

trademarks or registered trademarks of their respective owners.

18-05-22 OINA (DD-3006)

Sophos SG 330 Operating Instructions Manual

Brand: Sophos

Model: SG 330

Type: Operating Instructions Manual

This manual is also suitable for

Download PDF

report

Sophos SG 330 Operating Instructions Manual

This manual is also suitable for

Sophos SG 330 Operating Instructions Manual

Related papers

Other documents